io.github.alexey-pelykh/qontoctl

CLI and MCP server for the Qonto banking API.

This project is brought to you by Alexey Pelykh.

What It Does

QontoCtl lets AI assistants (Claude, etc.) interact with Qonto through the Model Context Protocol. It can:

• Organizations — retrieve organization details and settings
• Accounts — list, create, update, close bank accounts; download IBAN certificates
• Transactions — list, search, filter bank transactions; manage transaction attachments
• Bank Statements — list, view, and download bank statements
• Labels — manage transaction labels and categories
• Memberships — view team members, show current membership, invite new members
• SEPA Beneficiaries — list, add, update, trust/untrust SEPA beneficiaries
• SEPA Transfers — list, create, cancel transfers; download proofs; verify payees
• Internal Transfers — create transfers between accounts in the same organization
• Bulk Transfers — list and view bulk transfer batches
• Recurring Transfers — list and view recurring transfers
• Clients — list, create, update, delete clients
• Client Invoices — full lifecycle: create, update, finalize, send, mark paid, cancel, upload files
• Quotes — create, update, delete, send quotes
• Credit Notes — list and view credit notes
• Supplier Invoices — list, view, and bulk-create supplier invoices
• Requests — list organization requests
• Attachments — upload and view attachments
• E-Invoicing — retrieve e-invoicing settings

Prerequisites

• Node.js >= 24
• A Qonto business account with API access

Installation

npm install -g qontoctl

Or run directly with npx:

npx qontoctl --help

Or install via Homebrew:

brew install qontoctl/tap/qontoctl

Quick Start

# 1. Install
npm install -g qontoctl

# 2. Create a profile with your Qonto API credentials
qontoctl profile add mycompany

# 3. Test the connection
qontoctl profile test --profile mycompany

# 4. List your accounts
qontoctl account list --profile mycompany

MCP Integration

QontoCtl implements the Model Context Protocol (MCP), letting AI assistants interact with your Qonto account through natural language.

MCP Client Configuration

{
    "mcpServers": {
        "qontoctl": {
            "command": "npx",
            "args": ["qontoctl", "mcp"]
        }
    }
}

claude mcp add qontoctl -- npx qontoctl mcp

{
    "mcpServers": {
        "qontoctl": {
            "command": "npx",
            "args": ["qontoctl", "mcp"]
        }
    }
}

{
    "mcpServers": {
        "qontoctl": {
            "command": "npx",
            "args": ["qontoctl", "mcp"]
        }
    }
}

Available MCP Tools

Example Prompts

Once configured, you can ask your AI assistant things like:

• "Show my Qonto account balances"
• "List recent transactions over 1000 EUR"
• "What were last month's card payments?"
• "Show all team members in my organization"
• "List bank statements for January 2026"
• "Create a summary of this week's debits"

CLI Usage

Commands

Global Options

Configuration

QontoCtl supports two authentication methods:

• API Key — read-only access using your organization slug and secret key
• OAuth 2.0 — full access including write operations and SCA; see the OAuth App Setup Guide

Profile Format

All configuration files use the same YAML format:

# API Key authentication
api-key:
    organization-slug: acme-corp-4821
    secret-key: your-secret-key

# OAuth 2.0 authentication (see docs/oauth-setup.md)
oauth:
    client-id: your-client-id
    client-secret: your-client-secret

Resolution Order

Without --profile:

1. QONTOCTL_* environment variables (highest priority)
2. .qontoctl.yaml in current directory
3. ~/.qontoctl.yaml (home default)

With --profile acme:

1. QONTOCTL_ACME_* environment variables (highest priority)
2. ~/.qontoctl/acme.yaml

Environment Variables

Environment variables override file values. Without --profile:

With --profile <name>, prefix becomes QONTOCTL_{NAME}_ (uppercased, hyphens replaced with underscores). For example, --profile acme reads QONTOCTL_ACME_ORGANIZATION_SLUG.

Debug Mode

The --verbose and --debug flags enable wire-level logging to stderr:

qontoctl --verbose transaction list   # request/response summaries
qontoctl --debug transaction list     # full headers and response bodies

Security note: --debug logs full API response bodies. Known sensitive fields (IBAN, BIC, balance) are automatically redacted, but responses may still contain other financial data. Do not use --debug in shared environments or pipe debug output to files accessible by others.

Disclaimer

qontoctl is an independent project not affiliated with, endorsed by, or officially connected to Qonto or Qonto SAS.

Qonto is a trademark of Qonto SAS.

License

AGPL-3.0-only

What AGPL means for you

• Using qontoctl as a CLI tool or MCP server does not make your code AGPL-licensed. Running the tool, scripting around it, or connecting it to your applications is normal use — no license obligations arise.
• Using @qontoctl/core as a library (importing it into your code) means your combined work is covered by AGPL-3.0. If you distribute that combined work, you must make its source available under AGPL-compatible terms.
• Modifying and distributing qontoctl itself requires you to share your changes under AGPL-3.0.
• Commercial licensing is available if AGPL does not fit your use case — contact the maintainer.